CWE-295: Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

Consequences

• Integrity, Authentication: Bypass Protection Mechanism, Gain Privileges or Assume Identity

How to prevent it

• Architecture and Design, Implementation: Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
• Implementation: If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Recent advisories

• GHSA-4487-j8r4-4g2f — Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
• GHSA-5x38-2vff-x55p — Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
• EEF-CVE-2026-115693 — Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
• GHSA-6q48-6c7w-9gw2 — certifi bundles emSign root CAs with compromised intermediate CA keys
• GHSA-2m5v-pch6-74hx — undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
• GHSA-vrv5-2jg9-4mmr — Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability
• GHSA-fqpq-cx42-9jmm — Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability
• EEF-CVE-2026-103502 — hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25
• GHSA-8988-9cw3-xx77 — urllib3: HTTPS proxy TLS configuration may be ignored or overridden
• GHSA-6vj9-mwq6-2f5v — Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure
• GHSA-82r6-8w77-94w6 — AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
• CVE-2026-85102 — Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute…
• GHSA-w293-vg96-wgc3 — undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
• GHSA-m2h6-j472-rp4c — python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
• GHSA-94v3-77j7-vm48 — Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override

All advisories for CWE-295